Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 26, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
244311 7.5 危険 Activewebsoftwares - Active Price Comparison の login.aspx における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-5974 2012-06-26 16:10 2009-01-26 Show GitHub Exploit DB Packet Storm
244312 7.5 危険 Activewebsoftwares - Active Web Mail の login.aspx における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-5973 2012-06-26 16:10 2009-01-26 Show GitHub Exploit DB Packet Storm
244313 7.5 危険 Activewebsoftwares - Active Business Directory の default.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-5972 2012-06-26 16:10 2009-01-26 Show GitHub Exploit DB Packet Storm
244314 7.5 危険 globsy - Globsy の globsy_edit.php における任意のファイルを上書きされる脆弱性 CWE-20
不適切な入力確認 		CVE-2008-5966 2012-06-26 16:10 2009-01-26 Show GitHub Exploit DB Packet Storm
244315 10 危険 gravity-gtd - Gravity GTD の library/setup/rpc.php における任意の PHP コードを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2008-5963 2012-06-26 16:10 2009-01-23 Show GitHub Exploit DB Packet Storm
244316 6.8 警告 gravity-gtd - Gravity GTD の library/setup/rpc.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-5962 2012-06-26 16:10 2009-01-23 Show GitHub Exploit DB Packet Storm
244317 7.5 危険 Activewebsoftwares - Active Test の start.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-5959 2012-06-26 16:10 2009-01-23 Show GitHub Exploit DB Packet Storm
244318 7.5 危険 Activewebsoftwares - Active Test における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-5958 2012-06-26 16:10 2009-01-23 Show GitHub Exploit DB Packet Storm
244319 5 警告 aspapps - ASP Template Creature におけるデータベースをダウンロードされる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-5951 2012-06-26 16:10 2009-01-23 Show GitHub Exploit DB Packet Storm
244320 7.5 危険 aspapps - ASP Template Creature の media/media_level.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-5950 2012-06-26 16:10 2009-01-23 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 27, 2026, 4:52 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
219801 9.8 CRITICAL
Network 		vmware vcloud_director VMware vCloud Director for Service Providers 9.5.x prior to 9.5.0.3 update resolves a Remote Session Hijack vulnerability in the Tenant and Provider Portals. Successful exploitation of this issue may… CWE-384
 Session Fixation 		CVE-2019-5523 2024-11-21 13:45 2019-04-2 Show GitHub Exploit DB Packet Storm
219802 9.8 CRITICAL
Network 		overit geocall An issue was discovered in OverIT Geocall 6.3 before build 2:346977. An unauthenticated servlet allows an attacker to obtain a cookie of an authenticated user, and login to the web application. NVD-CWE-noinfo
CVE-2019-5891 2024-11-21 13:45 2019-04-2 Show GitHub Exploit DB Packet Storm
219803 8.8 HIGH
Network 		overit geocall An issue was discovered in OverIT Geocall 6.3 before build 2:346977. Weak authentication and session management allows an authenticated user to obtain access to the Administrative control panel and e… CWE-287
Improper Authentication 		CVE-2019-5890 2024-11-21 13:45 2019-04-2 Show GitHub Exploit DB Packet Storm
219804 7.5 HIGH
Network 		overit geocall An log-management directory traversal issue was discovered in OverIT Geocall 6.3 before build 2:346977. CWE-22
Path Traversal 		CVE-2019-5889 2024-11-21 13:45 2019-04-2 Show GitHub Exploit DB Packet Storm
219805 6.1 MEDIUM
Network 		overit geocall Multiple XSS vulnerabilities were discovered in OverIT Geocall 6.3 before build 2:346977. CWE-79
Cross-site Scripting 		CVE-2019-5888 2024-11-21 13:45 2019-04-2 Show GitHub Exploit DB Packet Storm
219806 7.5 HIGH
Network 		nodejs
opensuse 		node.js
leap 		Keep-alive HTTP and HTTPS connections can remain open and inactive for up to 2 minutes in Node.js 6.16.0 and earlier. Node.js 8.0.0 introduced a dedicated server.keepAliveTimeout which defaults to 5 … CWE-770
 Allocation of Resources Without Limits or Throttling 		CVE-2019-5739 2024-11-21 13:45 2019-03-29 Show GitHub Exploit DB Packet Storm
219807 7.5 HIGH
Network 		nodejs
opensuse 		node.js
leap 		In Node.js including 6.x before 6.17.0, 8.x before 8.15.1, 10.x before 10.15.2, and 11.x before 11.10.1, an attacker can cause a Denial of Service (DoS) by establishing an HTTP or HTTPS connection in… CWE-770
 Allocation of Resources Without Limits or Throttling 		CVE-2019-5737 2024-11-21 13:45 2019-03-29 Show GitHub Exploit DB Packet Storm
219808 7.0 HIGH
Local 		nvidia geforce_experience NVIDIA GeForce Experience before 3.18 contains a vulnerability when ShadowPlay or GameStream is enabled. When an attacker has access to the system and creates a hard link, the software does not check… CWE-59
Link Following 		CVE-2019-5674 2024-11-21 13:45 2019-03-29 Show GitHub Exploit DB Packet Storm
219809 7.5 HIGH
Network 		weban an Directory traversal vulnerability in 'an' App for iOS Version 3.2.0 and earlier allows remote attackers to read arbitrary files via unspecified vectors. CWE-22
Path Traversal 		CVE-2019-5927 2024-11-21 13:45 2019-03-27 Show GitHub Exploit DB Packet Storm
219810 6.1 MEDIUM
Network 		kinagacms_project kinagacms Cross-site scripting vulnerability in KinagaCMS versions prior to 6.5 allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors. CWE-79
Cross-site Scripting 		CVE-2019-5926 2024-11-21 13:45 2019-03-27 Show GitHub Exploit DB Packet Storm